CVE-2026-69227: CVE-2026-69227: kritik işlevde kimlik doğrulaması eksik

Açıklama (NVD)

A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.

Özet bilgiler

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,37 (yüzdelik 31)

CWE

CWE-306

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.esri.com
• CWE-306